library/sonarqube:6.7.6-community container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of library/sonarqube
library/sonarqube:6.7.6-community resolved to 0ae5169e3d0f, scanned 14 Sept 2026: 425 findings, 13 critical, 7 on KEV; deployed by 1 chart, among them sonarqube.
Radar Score
425 findings on digest 0ae5169e3d0f · scanned 14 Sept 2026
KEV ×7 confirmed exploitedRadar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Medium findings
Medium: findings whose contribution to the Radar Score is 15–39. Show every band
Findings for digest 0ae5169e3d0f as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GHSA-8vhq-qq4p-grq3 | plexus-utils | 3.0.16 |
| Medium | GHSA-6v56-cpg6-3rpx | mercurial | 4.4.1 |
| Medium | GHSA-f9xh-2qgp-cq57 | jackson-databind | 2.9.10.8 |
| Medium | GHSA-4jrv-ppp4-jm57 | gson | 2.8.9 |
| Medium | GHSA-m6x4-97wx-4q27 | jackson-databind | 2.9.10.8 |
| Medium | GHSA-fqwf-pjwf-7vqv | jackson-databind | 2.9.10.4 |
| Medium | GHSA-3qmg-c9vc-r47j | mercurial | 4.3 |
| Medium | GHSA-qr7j-h6gg-jmgc | jackson-databind | 2.9.6 |
| Medium | GHSA-mx7p-6679-8g3q | jackson-databind | 2.9.10.1 |
| Medium | DLA-2544-1 | openldap | 2.4.44+dfsg-5+deb9u7 |
| Medium | DLA-3008-1 | openssl | 1.1.0l-1~deb9u6 |
| Medium | DSA-4511-1 | nghttp2 | 1.18.1-1+deb9u1 |
| Medium | GHSA-r3gr-cxrf-hg25 | jackson-databind | 2.9.10.8 |
| Medium | GHSA-gjmw-vf9h-g25v | jackson-databind | 2.9.10.1 |
| Medium | GHSA-h3cw-g4mq-c5x2 | jackson-databind | 2.9.10.6 |
| Medium | GHSA-q446-82vq-w674 | jsch | 0.1.54 |
| Medium | GHSA-j563-grx4-pjpv | xstream | 1.4.20 |
| Medium | GHSA-24rp-q3w6-vc56 | postgresql | 42.2.28 |
| Medium | GHSA-2rvv-w9r2-rg7m | tomcat-embed-core | 8.5.60 |
| Medium | DLA-2952-1 | openssl | 1.1.0l-1~deb9u5 |
| Medium | DLA-2953-1 | openssl1.0 | 1.0.2u-1~deb9u7 |
| Medium | GHSA-85cw-hj65-qqv9 | jackson-databind | 2.9.10 |
| Medium | GHSA-fmmc-742q-jg75 | jackson-databind | 2.9.10.1 |
| Medium | GHSA-gwp4-hfv6-p7hw | jackson-databind | 2.9.9.2 |
| Medium | GHSA-j823-4qch-3rgm | jackson-databind | 2.9.10.5 |
| Medium | GHSA-9xcj-c8cr-8c3c | tomcat-embed-core | 8.5.50 |
| Medium | GHSA-f3j5-rmmp-3fc5 | jackson-databind | 2.9.10 |
| Medium | GHSA-5p34-5m6p-p58g | jackson-databind | 2.9.10.4 |
| Medium | GHSA-c265-37vj-cwcc | jackson-databind | 2.9.10.5 |
| Medium | GHSA-9vvp-fxw6-jcxr | jackson-databind | 2.9.10.4 |
| Medium | GHSA-wh8g-3j2c-rqj5 | jackson-databind | 2.9.10.8 |
| Medium | DLA-3017-1 | openldap | 2.4.44+dfsg-5+deb9u9 |
| Medium | DLA-2574-1 | openldap | 2.4.44+dfsg-5+deb9u8 |
| Medium | GHSA-mm9x-g8pc-w292 | netty-handler | 4.1.46 |
| Medium | GHSA-5949-rw7g-wx7w | jackson-databind | 2.9.10.7 |
| Medium | GHSA-jx6h-3fjx-cgv5 | tomcat-embed-core | 8.5.28 |
| Medium | GHSA-qjw2-hr98-qgfh | jackson-databind | 2.9.10.6 |
| Medium | GHSA-6wqp-v4v6-c87c | jackson-databind | 2.9.6 |
| Medium | GHSA-6rxj-58jh-436r | tomcat-embed-core | 8.5.28 |
| Medium | GHSA-rgh3-987h-wpmw | xstream | 1.4.9 |
| Medium | GHSA-rmr5-cpv2-vgjf | xstream | 1.4.19 |
| Medium | DLA-2968-1 | zlib | 1:1.2.8.dfsg-5+deb9u1 |
| Medium | GHSA-jgwr-3qm3-26f3 | tomcat-embed-core | 8.5.61 |
| Medium | DLA-2563-1 | openssl | 1.1.0l-1~deb9u3 |
| Medium | DLA-2565-1 | openssl1.0 | 1.0.2u-1~deb9u4 |
| Medium | GHSA-qpfq-ph7r-qv6f | xstream | 1.4.16 |
| Medium | DLA-2766-1 | openssl | 1.1.0l-1~deb9u4 |
| Medium | DLA-2774-1 | openssl1.0 | 1.0.2u-1~deb9u6 |
| Medium | GHSA-cjjf-94ff-43w7 | jackson-databind | 2.9.6 |
| Medium | GHSA-h4rc-386g-6m85 | jackson-databind | 2.9.10.4 |
Used by
| Chart | Version | Tag | Containers |
|---|---|---|---|
| sonarqubestakaterVerified publisher | 0.10.3 | 6.7.6-community | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.